Information Notice on the Protection and Processing of Personal Data

Last Updated: 07 September 2026

Beksan Çivi Tel Makina İmalat San. ve Tic. A.Ş. (“Beksan” or the “Company”) attaches importance to the privacy and security of personal data.

In accordance with Turkish Personal Data Protection Law No. 6698 (“KVKK”) and other applicable legislation, we take appropriate administrative and technical measures to ensure that personal data is processed lawfully and fairly, kept accurate and up to date where necessary, processed for specified, explicit and legitimate purposes, limited and proportionate to those purposes, and retained only for the period required by applicable legislation or the relevant purpose of processing.

This Information Notice is intended to provide information regarding the processing of personal data relating to visitors of www.beksan.com, persons contacting us through contact and quotation forms, prospective customers, customers, suppliers, business partners and job applicants.

Where necessary for a specific processing activity, separate or layered information notices may also be provided for contact forms, quotation requests, recruitment applications and similar processes.

1. Identity of the Data Controller

The data controller within the scope of Turkish Personal Data Protection Law No. 6698 is:

Beksan Çivi Tel Makina İmalat San. ve Tic. A.Ş.

Address: Organize Sanayi Bölgesi 2. Cadde No: 1, Balıkesir / TÜRKİYE
Telephone: +90 266 281 10 05
Fax: +90 266 281 10 09
E-mail: info@beksan.com
Website: https://www.beksan.com

2. Categories of Personal Data Processed

Depending on your relationship with the Company and the services you use, the following categories of personal data may be processed.

Identity Information

Name, surname, information relating to company representatives and other identity information required for the relevant transaction.

Contact Information

Telephone number, e-mail address, postal address and other information provided for communication purposes.

Request and Transaction Information

Messages sent through contact forms, quotation requests, product and service requests, enquiries, complaints, suggestions and information relating to communications with us.

Customer and Supplier Transaction Information

Information relating to quotations, orders, agreements, invoices, shipments, deliveries, payments, sales, purchases and commercial relationships.

Recruitment and Job Applicant Information

CV/resume, educational information, professional experience, employment history, certifications, qualifications, contact information and other information voluntarily provided as part of an application.

Transaction Security and Technical Information

IP address, date and time information, website access and activity records, logs, browser and device information, security records and technical usage data collected through cookies and similar technologies.

Analytics Information

Where the user has provided the required preference or consent, information relating to pages visited, sessions, traffic sources, approximate location, device and browser type and interactions with the website may be processed for analytics purposes.

Please do not submit special categories of personal data through recruitment applications, contact forms or free-text fields unless such information is specifically required.

Where processing of special categories of personal data is necessary, such information will only be processed where one of the legal conditions under Article 6 of the KVKK is applicable and appropriate administrative and technical safeguards are implemented.

3. Purposes of Processing Personal Data

Depending on the relevant processing activity, personal data may be processed for the following purposes:

• ensuring the secure, proper and uninterrupted operation of the website,
• evaluating enquiries and information requests submitted through the website,
• communicating with users,
• preparing and responding to quotation requests,
• providing information about our products and services,
• managing relationships with customers, prospective customers, suppliers and business partners,
• carrying out quotation, order, sales, purchasing, production, shipment, delivery and after-sales support processes,
• establishing, performing and monitoring agreements,
• carrying out finance, accounting and invoicing processes,
• receiving and evaluating job applications and carrying out recruitment processes,
• ensuring information and system security,
• identifying and preventing unauthorised access, abuse, spam, bots and cyberattacks,
• detecting and resolving technical problems,
• analysing website traffic and usage statistics where the user has provided the required permission,
• improving our products, services and website experience,
• complying with legal obligations,
• responding to lawful requests from competent public authorities,
• managing legal disputes,
• establishing, exercising or protecting legal rights,
• ensuring the legal and commercial security of the Company.

4. Methods of Collecting Personal Data

Personal data may be collected through:

• the www.beksan.com website,
• contact forms,
• quotation forms,
• job application forms,
• e-mail,
• telephone,
• fax,
• physical documents,
• agreements,
• quotation and order documents,
• customer and supplier records,
• information technology systems,
• server and security logs,
• cookies and similar technologies.

Personal data may be collected wholly or partly by automated means, or by non-automated means provided that the data forms part of a data filing system.

5. Legal Grounds for Processing Personal Data

Personal data is processed on the basis of the processing conditions specified in Article 5 and, where applicable, Article 6 of the KVKK, depending on the nature of the processing activity.

The principal legal grounds include:

Where explicit consent is required, it is obtained separately as a freely given, informed and specific indication of the data subject's wishes.

Compliance with the information obligation is not conditional upon the data subject giving consent. Where appropriate, the information and explicit consent processes are conducted separately.

6. Transfer of Personal Data

Where the applicable legal processing conditions are satisfied and only to the extent necessary, personal data may be transferred:

• to competent public authorities and institutions for compliance with legal obligations and lawful official requests,
• to lawyers, legal advisers and competent authorities for legal advice, dispute management and protection of legal rights,
• to accountants, auditors, banks and financial institutions for accounting, auditing, payment and financial processes,
• to IT and service providers for website, software, hosting, information technology, e-mail, security, backup and technical support services,
• to courier, transport and logistics providers for shipment and delivery of products,
• to suppliers and business partners, to the extent necessary for the performance of contracts, quotations, orders, production and commercial activities.

Any transfer of personal data is limited to what is relevant, necessary and proportionate to the relevant purpose.

7. International Transfers of Personal Data

Certain technology and service providers used on our website may be established abroad or may operate servers and infrastructure outside Türkiye. Consequently, certain personal data may be processed abroad or transferred internationally.

In particular, the use of services such as Google Analytics, Google Tag Manager, Google reCAPTCHA and similar third-party technologies that may be used in the future may involve the processing of IP addresses, device and browser information, usage and interaction data or other technical information necessary for the relevant service.

International transfers of personal data are carried out only where an applicable transfer condition under Article 9 of the KVKK and the relevant secondary legislation is satisfied.

Where applicable to the relevant transfer, adequacy decisions, appropriate safeguards or other lawful transfer mechanisms provided under the applicable legislation are taken into account.

Where explicit consent constitutes an applicable legal basis for the relevant transfer, the data subject may be asked to provide explicit consent after receiving the required information.

Article 9 of the KVKK governing international transfers was amended in 2024 and now provides a framework involving adequacy decisions, appropriate safeguards and other transfer mechanisms specified by law.

8. Cookies and Website Usage

Strictly necessary cookies and similar technologies may be used on www.beksan.com to ensure the secure and proper operation of the website.

Where the user has provided the required preference, Google Analytics 4 (GA4) is used to measure website performance and statistically analyse how visitors use our website.

Where explicit consent is required for the relevant processing activity, non-essential analytics and performance cookies are not activated before the user consents to the Analytics / Performance Cookies category.

Google Tag Manager may be used to centrally manage tags used on the website.

Google reCAPTCHA may be used on contact, quotation, recruitment or similar forms to protect those forms against spam, bots and automated attacks.

Users may manage their preferences for non-essential cookies through the Cookie Preferences panel and may change or withdraw previously given permissions at any time.

Detailed information about cookie names, providers, purposes, categories and retention periods is provided in our Cookie Policy.

The Turkish Personal Data Protection Authority's cookie guidance provides that where explicit consent is required for non-essential cookies, consent should be based on an active user action and such cookies should not be activated by default.

9. Retention of Personal Data

Personal data is retained for the period required for the relevant processing purpose and in accordance with statutory retention periods prescribed by applicable legislation.

Where more than one retention period applies, the applicable legal and operational requirements relating to the relevant data are taken into account.

When the purpose of processing ceases to exist and there is no other legal ground requiring retention, personal data is deleted, destroyed or anonymised in accordance with applicable legislation.

10. Security of Personal Data

Beksan Çivi Tel Makina İmalat San. ve Tic. A.Ş. takes appropriate technical and organisational measures designed to:

• prevent unlawful processing of personal data,
• prevent unlawful or unauthorised access,
• prevent unauthorised alteration or disclosure,
• prevent loss and misuse of personal data,
• ensure secure retention of personal data.

Such measures may include:

• user and access authorisation,
• role-based access controls,
• information system and network security,
• firewall and antivirus systems,
• logging,
• secure communication technologies,
• backup systems,
• update and patch management,
• authorised personnel access controls,
• physical security measures,
• security controls relating to service providers and suppliers.

11. Rights of Data Subjects

Under Article 11 of the KVKK, data subjects have the right to apply to the data controller and:

• learn whether their personal data is being processed,
• request information if their personal data has been processed,
• learn the purpose of processing and whether personal data is used in accordance with that purpose,
• know the third parties to whom personal data is transferred in Türkiye or abroad,
• request rectification of incomplete or inaccurate personal data,
• request deletion or destruction of personal data where the applicable statutory conditions are met,
• request notification of rectification, deletion or destruction to third parties to whom personal data has been transferred,
• object to a result arising against the person through analysis of processed data exclusively by automated systems,
• claim compensation where damage has been suffered due to unlawful processing of personal data.

12. How to Exercise Your Rights

Requests regarding your rights under the KVKK may be submitted:

• in writing to the Company's address stated below,
• by registered electronic mail (KEP),
• using a secure electronic signature or mobile signature,
• using an e-mail address previously notified by you to the Company and registered in the Company's systems,
• through a software application or system specifically developed for applications, if available.

Applications must include:

• name and surname,
• signature where the application is submitted in writing,
• Turkish ID number for Turkish citizens,
• nationality, passport number or identification number, if any, for foreign nationals,
• residential or business address for notification,
• e-mail address, telephone and fax number for notification, if any,
• the subject matter of the request.

Any information and documents relevant to the request should also be attached.

Beksan Çivi Tel Makina İmalat San. ve Tic. A.Ş.
Organize Sanayi Bölgesi 2. Cadde No: 1, Balıkesir / TÜRKİYE

General contact: info@beksan.com
Telephone: +90 266 281 10 05

Where a KVKK request is submitted by ordinary e-mail to info@beksan.com, the sender's e-mail address must have previously been notified to the Company by the data subject and must be registered in the Company's systems.

Applications will be concluded as soon as possible depending on the nature of the request and, in any event, within 30 days at the latest.

Where responding to an application incurs an additional cost, a fee may be charged in accordance with applicable legislation and the tariff determined by the Turkish Personal Data Protection Board.

13. Additional Information Notices

This Information Notice provides general information regarding personal data processing activities carried out in connection with www.beksan.com and general interactions with the Company.

Depending on the nature of the relevant processing activity, separate and processing-specific information notices may also be provided for:

• job applicants,
• employees,
• customers,
• suppliers,
• visitors,
• users of contact or quotation forms.

Where a processing-specific notice differs from this general notice, the processing-specific notice shall apply to the relevant processing activity.

14. Updates to this Information Notice

Beksan Çivi Tel Makina İmalat San. ve Tic. A.Ş. may update this Information Notice in response to:

• changes in applicable legislation,
• decisions of the Turkish Personal Data Protection Board,
• changes to Company processes,
• changes to the technologies and services used on the website.

The latest version of this Information Notice becomes effective when published on www.beksan.com.